Blog

Notes from the ops room.

Hosting, infrastructure, development, and SEO — written by the people doing the work.

Latest Nov 4, 2026 Backup & Recovery

Synology NAS units on outdated DSM hit by C3RB3R ransomware

Synology says attackers are encrypting NAS units that never received a 2024 DSM fix, and Qihoo 360 links the same C3RB3R ransomware to two flaws patched in September 2026. The builds below close both.

Read article

Nov 3, 2026 Tutorials

Set up automatic security updates on Ubuntu 24.04 and AlmaLinux 9

Configure unattended-upgrades and dnf-automatic to install security fixes only, reboot in a set window when a kernel upd...

Read article

Nov 2, 2026 Security

Registrar DNS hijacks hit DebugBear and at least 12 Name.com domains

Attackers changed DNS through the registrar for DebugBear and at least 12 crypto sites on Name.com, then used the redire...

Read article

Nov 1, 2026 WordPress

CVE-2026-119977: WordPress core updater RCE hits 4.7 through 7.1.3

WordPress 7.1.4 and backports to every branch since 4.7 fix an unauthenticated code execution race in the core updater....

Read article

Notes from the ops room.

Synology NAS units on outdated DSM hit by C3RB3R ransomware

More articles

Set up automatic security updates on Ubuntu 24.04 and AlmaLinux 9

Registrar DNS hijacks hit DebugBear and at least 12 Name.com domains

CVE-2026-119977: WordPress core updater RCE hits 4.7 through 7.1.3

More from the blog

Binance links $6.3B theft to a compromised DevOps engineer laptop

CVE-2026-46300: May Linux kernel bug chained with PHP2Shell for root

CVE-2026-98432: Linux TCP flaw rated 9.8, no Ubuntu or RHEL fix yet

UpdraftCentral key theft: WP-CLI checks for rogue plugins and admins

CVE-2026-111497: Brotli decoder RCE now on CISA exploited list

LiteLLM 1.107.0 on PyPI and Docker stole credentials for two hours

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 patch two leaked RCE flaws

Rank Math PRO 3.0.123 downloads carried a backdoor for 11 hours

MariaDB CVE-2026-92262 rated 9.9; fixed builds out since August 24

ConnectWise Cloud Backup credential abused in 173 Microsoft 365 tenants